欧盟《一般数据保护条例》下区块链的数据保护义务

Data Protection Obligations of the Blockchain under the EU's GDPR

基于数据孤岛时代的集中式数据处理系统而设计的欧盟《一般数据保护条例》与以分散式数据管理为特征、代表未来发展方向的区块链之间存在一定的紧张关系。保护基本权利和促进创新都是《一般数据保护条例》的规范目标,因此,应尽可能对条例进行目的解释以调和两者之间的矛盾。我国应当汲取欧盟《一般数据保护条例》的经验与教训,根据不同产业下个人数据保护的要求,建立以《个人信息保护法》为基础,以专门性法规为补充的个人数据保护法律机制,在权利保护和科技创新之间实现动态平衡,而不应过早对区块链相关的各类创新实践加以过于严苛地限制,以免妨碍区块链技术的进一步发展。

There is a certain tension between the EU GDPR,which is designed based on the centralized data process⁃ing system in the era of data islands,and the blockchain,which is characterized by decentralized data management and represents the future direction of development.How to not stifle the innovation potential of the blockchain while ensur⁃ing that personal data is effectively protected is an important issue that must be considered when implementing the GDPR.Protecting basic rights and promoting innovation are the normative goals of the GDPR.Therefore,as far as pos⁃sible,the GDPR should be interpreted for the purpose of reconciling the contradiction between the two goals.China should learn from the experience and lessons of the EU GDPR,and according to the data protection needs of different industries,formulate a personal data protection legal system centered on the Personal Information Protection Law and supplemented by special regulations.And this legal system should not prematurely restrict various types of blockchainrelated innovations,so as not to hinder the further development of blockchain technology and achieve a dynamic bal⁃ance between the protection of basic rights and technological innovation.